CVE-2026-112368 | MongoDB PHP Driver up to 1.21.11/2.1.11/2.5.4 BSON Decoding recursion

October 19, 2026 Yanac

A vulnerability, which was classified as critical, has been found in MongoDB PHP Driver up to 1.21.11/2.1.11/2.5.4. Affected by this issue is some unknown functionality of the component BSON Decoding. The manipulation leads to uncontrolled recursion.

This vulnerability is listed as CVE-2026-112368. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More